We are setting a Cisco's wireless solutions where we want to authenticate our clients based on their AD credentials ONLY if their devices are part of the domain.
We set up a NPS with a policy which conditions are NAS Port type, User Group and Machine Group and we still cant make it work.
First of all is it possible to do that with PEAP. If we are only authenticating based on User or Machine group everything is OKbutneverwith the both conditionsat once.
I suppose that our problem is because we are not configuring the supplicant as we should. In 802.1x settings there isn't authentication mode "UserAND Computer authentication".
What we have to do to make this scenario work?